Loading npm security reports…
Installing the package triggers destructive changes to the consumer's dependency tree. It removes React and React DOM without user action.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe automatic postinstall hook recursively deletes the consumer's React and React DOM installations.
package.jsonView on unpkg · L71Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgThis report applies to @1interface/shared-core@0.10.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L72Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L72The automatic postinstall hook recursively deletes the consumer's React and React DOM installations.
package.jsonView on unpkg · L71Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkg